/*

Copyright 2024 Feast Community.

Licensed under the Apache License, Version 2.0 (the "License");

you may not use this file except in compliance with the License.

You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software

distributed under the License is distributed on an "AS IS" BASIS,

WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

See the License for the specific language governing permissions and

limitations under the License.

*/

package v1

import (

appsv1 "k8s.io/api/apps/v1"

autoscalingv2 "k8s.io/api/autoscaling/v2"

batchv1 "k8s.io/api/batch/v1"

corev1 "k8s.io/api/core/v1"

metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"

"k8s.io/apimachinery/pkg/util/intstr"

)

const (

// Feast phases:

ReadyPhase = "Ready"

PendingPhase = "Pending"

FailedPhase = "Failed"

// Feast condition types:

ClientReadyType = "Client"

OfflineStoreReadyType = "OfflineStore"

OnlineStoreReadyType = "OnlineStore"

RegistryReadyType = "Registry"

UIReadyType = "UI"

LineageReadyType = "Lineage"

McpServerReadyType = "McpServer"

ReadyType = "FeatureStore"

AuthorizationReadyType = "Authorization"

CronJobReadyType = "CronJob"

// Feast condition reasons:

ReadyReason = "Ready"

FailedReason = "FeatureStoreFailed"

DeploymentNotAvailableReason = "DeploymentNotAvailable"

OfflineStoreFailedReason = "OfflineStoreDeploymentFailed"

OnlineStoreFailedReason = "OnlineStoreDeploymentFailed"

RegistryFailedReason = "RegistryDeploymentFailed"

UIFailedReason = "UIDeploymentFailed"

LineageFailedReason = "LineageDeploymentFailed"

McpServerFailedReason = "McpServerDeploymentFailed"

ClientFailedReason = "ClientDeploymentFailed"

CronJobFailedReason = "CronJobDeploymentFailed"

KubernetesAuthzFailedReason = "KubernetesAuthorizationDeploymentFailed"

OidcAuthzFailedReason = "OidcAuthorizationDeploymentFailed"

// Feast condition messages:

ReadyMessage = "FeatureStore installation complete"

OfflineStoreReadyMessage = "Offline Store installation complete"

OnlineStoreReadyMessage = "Online Store installation complete"

RegistryReadyMessage = "Registry installation complete"

UIReadyMessage = "UI installation complete"

LineageReadyMessage = "Lineage server installation complete"

McpServerReadyMessage = "MCP Server installation complete"

ClientReadyMessage = "Client installation complete"

CronJobReadyMessage = "CronJob installation complete"

KubernetesAuthzReadyMessage = "Kubernetes authorization installation complete"

OidcAuthzReadyMessage = "OIDC authorization installation complete"

DeploymentNotAvailableMessage = "Deployment is not available"

// entity_key_serialization_version

SerializationVersion = 3

)

// MaterializationConfig controls feature materialization behavior written into feature_store.yaml.

type MaterializationConfig struct {

// Number of rows per batch when writing to the online store during materialization.

// Prevents OOM for large feature views. Supported engines: local, spark, ray.

// If unset, all rows are written in a single batch.

// +kubebuilder:validation:Minimum=1

// +optional

OnlineWriteBatchSize *int32 `json:"onlineWriteBatchSize,omitempty"`

// ExtraConfig passes additional materialization key-value settings inline into

// feature_store.yaml.

// +optional

ExtraConfig map[string]string `json:"extraConfig,omitempty"`

}

// OpenLineageConfig enables OpenLineage data lineage tracking for Feast operations.

// Lineage events are emitted during feast apply and materialization when enabled.

type OpenLineageConfig struct {

// Enable OpenLineage integration.

Enabled bool `json:"enabled"`

// Transport type for lineage events.

// +kubebuilder:validation:Enum=http;console;file;kafka

// +optional

TransportType *string `json:"transportType,omitempty"`

// URL for HTTP transport (e.g. http://feast-example-lineage:6580). Required when transportType is "http".

// +optional

TransportUrl *string `json:"transportUrl,omitempty"`

// API endpoint path appended to transportUrl. Defaults to "api/v1/lineage".

// +optional

TransportEndpoint *string `json:"transportEndpoint,omitempty"`

// Reference to a Secret containing the key "api_key" for lineage server authentication.

// +optional

ApiKeySecretRef *corev1.LocalObjectReference `json:"apiKeySecretRef,omitempty"`

// ExtraConfig holds additional OpenLineage key-value settings written inline into

// the openlineage block of feature_store.yaml alongside the typed fields above.

// Use this for non-core settings (e.g. namespace, producer, emit_on_apply,

// emit_on_materialize) and transport-specific options (e.g. kafka

// bootstrap_servers, topic; file path). Boolean values ("true"/"false") and

// integer values are automatically coerced to their native YAML types.

// Keys must be valid Feast OpenLineageConfig YAML field names.

// +optional

ExtraConfig map[string]string `json:"extraConfig,omitempty"`

// Consumer configures the OpenLineage consumer (event receiver) that enables

// Feast to receive and display lineage from external producers (Airflow, Spark, dbt, etc.).

// +optional

Consumer *OpenLineageConsumerConfig `json:"consumer,omitempty"`

}

// OpenLineageConsumerConfig configures the OpenLineage consumer (event receiver).

// When enabled, the Feast REST server exposes POST /api/v1/lineage to receive

// OpenLineage events from any producer, storing them for visualization in the Feast UI.

type OpenLineageConsumerConfig struct {

// Enable the OpenLineage consumer.

Enabled bool `json:"enabled"`

// StoreType is the storage backend for lineage events. Currently only "sql" is supported.

// +kubebuilder:default="sql"

// +kubebuilder:validation:Enum=sql

// +optional

StoreType *string `json:"storeType,omitempty"`

// Reference to a Secret containing the key "connection_string" for a separate

// lineage database. If omitted, the SQL registry database is reused.

// +optional

ConnectionStringSecretRef *corev1.LocalObjectReference `json:"connectionStringSecretRef,omitempty"`

// Reference to a Secret containing the key "api_key" that producers must

// provide in the X-API-Key header when sending events.

// +optional

ApiKeySecretRef *corev1.LocalObjectReference `json:"apiKeySecretRef,omitempty"`

// NamespaceMapping maps OpenLineage namespaces to Feast projects for

// RBAC-based filtering of lineage data in the UI.

// +optional

NamespaceMapping map[string]string `json:"namespaceMapping,omitempty"`

// RetentionDays is the number of days to retain OpenLineage events and runs.

// Events older than this are automatically pruned. Set to 0 to disable pruning.

// +kubebuilder:default=30

// +kubebuilder:validation:Minimum=0

// +optional

RetentionDays *int32 `json:"retentionDays,omitempty"`

// RetentionCheckIntervalHours is how often the background pruning task runs, in hours.

// +kubebuilder:default=6

// +kubebuilder:validation:Minimum=1

// +optional

RetentionCheckIntervalHours *int32 `json:"retentionCheckIntervalHours,omitempty"`

// LineageServer enables a separate Deployment for the OpenLineage consumer.

// When set, the consumer is removed from the UI/registry Pod and runs

// independently with its own scaling. The Feast producer transport is

// auto-configured to send events to the lineage Service.

// +optional

LineageServer *LineageServerConfig `json:"lineageServer,omitempty"`

}

// LineageServerConfig defines the separate lineage server Deployment.

type LineageServerConfig struct {

// Server configuration (image, resources, env, TLS, etc.).

// +optional

Server *ServerConfigs `json:"server,omitempty"`

// Replicas for the lineage Deployment. Default 1.

// +kubebuilder:default=1

// +kubebuilder:validation:Minimum=1

// +optional

Replicas *int32 `json:"replicas,omitempty"`

}

// MlflowConfig enables MLflow experiment tracking integration for Feast.

// When enabled, feature retrieval metadata is automatically logged to MLflow runs

// and the Feast UI displays lineage from feature views to registered models.

// +kubebuilder:validation:XValidation:rule="!has(self.extraConfig) || !('enabled' in self.extraConfig) && !('tracking_uri' in self.extraConfig) && !('ui_url' in self.extraConfig) && !('tracking_auth' in self.extraConfig) && !('auto_log' in self.extraConfig) && !('auto_log_entity_df' in self.extraConfig) && !('entity_df_max_rows' in self.extraConfig) && !('log_operations' in self.extraConfig) && !('ops_experiment_suffix' in self.extraConfig)",message="extraConfig must not contain keys that duplicate typed fields (enabled, tracking_uri, ui_url, tracking_auth, auto_log, auto_log_entity_df, entity_df_max_rows, log_operations, ops_experiment_suffix); use the corresponding spec fields instead."

type MlflowConfig struct {

// Enable MLflow integration.

Enabled bool `json:"enabled"`

// MLflow tracking server URI. When omitted, the operator auto-discovers

// from the cluster MLflow CR (status.address.url). Falls back to

// MLFLOW_TRACKING_URI env var on pods.

// +optional

TrackingUri *string `json:"trackingUri,omitempty"`

// Browser-reachable MLflow UI URL used for hyperlinks in Feast UI lineage.

// When omitted, the operator auto-discovers from the MLflow CR status.url

// (the external gateway route). Falls back to MLFLOW_UI_URL env var, then

// to trackingUri. Only needed when the tracking URI is cluster-internal.

// +optional

UiUrl *string `json:"uiUrl,omitempty"`

// Automatically log feature metadata on every retrieval inside an active MLflow run.

// Defaults to true when enabled.

// +optional

AutoLog *bool `json:"autoLog,omitempty"`

// Save entity DataFrame as MLflow artifact on historical retrieval.

// Defaults to false.

// +optional

AutoLogEntityDf *bool `json:"autoLogEntityDf,omitempty"`

// Maximum number of entity DataFrame rows to save as an MLflow artifact.

// DataFrames exceeding this limit are skipped. Defaults to 100000.

// +kubebuilder:validation:Minimum=1

// +optional

EntityDfMaxRows *int32 `json:"entityDfMaxRows,omitempty"`

// Log feast apply and materialize operations to a separate MLflow experiment.

// Defaults to false.

// +optional

LogOperations *bool `json:"logOperations,omitempty"`

// Suffix appended to the project name for the operations experiment.

// Defaults to "-feast-ops".

// +optional

OpsExperimentSuffix *string `json:"opsExperimentSuffix,omitempty"`

// Authentication method used by Feast pods when calling the MLflow tracking

// server. Common values: "kubernetes-namespaced" (token-based, default on

// OpenShift AI), "basic", "bearer", or "" (no auth for local/dev).

// Defaults to "kubernetes-namespaced".

// +optional

TrackingAuth *string `json:"trackingAuth,omitempty"`

// ExtraConfig holds additional MLflow key-value settings written inline into

// the mlflow block of feature_store.yaml. Boolean and integer string values

// are coerced to native YAML types. Keys must be valid Feast MlflowConfig

// YAML field names.

// +optional

ExtraConfig map[string]string `json:"extraConfig,omitempty"`

}

// FeatureStoreSpec defines the desired state of FeatureStore

// +kubebuilder:validation:XValidation:rule="self.replicas <= 1 || !has(self.services) || !has(self.services.scaling) || !has(self.services.scaling.autoscaling)",message="replicas > 1 and services.scaling.autoscaling are mutually exclusive."

// +kubebuilder:validation:XValidation:rule="self.replicas <= 1 && (!has(self.services) || !has(self.services.scaling) || !has(self.services.scaling.autoscaling)) || (has(self.services) && has(self.services.onlineStore) && has(self.services.onlineStore.persistence) && has(self.services.onlineStore.persistence.store))",message="Scaling requires DB-backed persistence for the online store. Configure services.onlineStore.persistence.store when using replicas > 1 or autoscaling."

// +kubebuilder:validation:XValidation:rule="self.replicas <= 1 && (!has(self.services) || !has(self.services.scaling) || !has(self.services.scaling.autoscaling)) || (!has(self.services) || !has(self.services.offlineStore) || (has(self.services.offlineStore.persistence) && has(self.services.offlineStore.persistence.store)))",message="Scaling requires DB-backed persistence for the offline store. Configure services.offlineStore.persistence.store when using replicas > 1 or autoscaling."

// +kubebuilder:validation:XValidation:rule="self.replicas <= 1 && (!has(self.services) || !has(self.services.scaling) || !has(self.services.scaling.autoscaling)) || (has(self.services) && has(self.services.registry) && (has(self.services.registry.remote) || (has(self.services.registry.local) && has(self.services.registry.local.persistence) && (has(self.services.registry.local.persistence.store) || (has(self.services.registry.local.persistence.file) && has(self.services.registry.local.persistence.file.path) && (self.services.registry.local.persistence.file.path.startsWith('s3://') || self.services.registry.local.persistence.file.path.startsWith('gs://')))))))",message="Scaling requires DB-backed or remote registry. Configure registry.local.persistence.store or use a remote registry when using replicas > 1 or autoscaling. S3/GCS-backed registry is also allowed."

type FeatureStoreSpec struct {

// +kubebuilder:validation:Pattern="^[A-Za-z0-9][A-Za-z0-9_-]*$"

// FeastProject is the Feast project id. This can be any alphanumeric string with underscores and hyphens, but it cannot start with an underscore or hyphen. Required.

FeastProject string `json:"feastProject"`

FeastProjectDir *FeastProjectDir `json:"feastProjectDir,omitempty"`

Services *FeatureStoreServices `json:"services,omitempty"`

AuthzConfig *AuthzConfig `json:"authz,omitempty"`

CronJob *FeastCronJob `json:"cronJob,omitempty"`

BatchEngine *BatchEngineConfig `json:"batchEngine,omitempty"`

// DataQualityMonitoring configures Data Quality Monitoring behaviour.

// +optional

DataQualityMonitoring *DataQualityMonitoringConfig `json:"dataQualityMonitoring,omitempty"`

// Replicas is the desired number of pod replicas. Used by the scale sub-resource.

// Mutually exclusive with services.scaling.autoscaling.

// +kubebuilder:default=1

// +kubebuilder:validation:Minimum=1

Replicas *int32 `json:"replicas,omitempty"`

// Materialization controls feature materialization behavior (batch size, pull strategy).

// Written into feature_store.yaml for all service pods.

// +optional

Materialization *MaterializationConfig `json:"materialization,omitempty"`

// OpenLineage enables OpenLineage data lineage tracking for Feast operations.

// Written into feature_store.yaml for all service pods.

// +optional

OpenLineage *OpenLineageConfig `json:"openlineage,omitempty"`

// Mlflow enables MLflow experiment tracking integration for Feast.

// Written into feature_store.yaml for all service pods and the client ConfigMap.

// When omitted and a cluster MLflow instance is detected, defaults to enabled

// with the discovered tracking URI.

// +optional

Mlflow *MlflowConfig `json:"mlflow,omitempty"`

}

// FeastProjectDir defines how to create the feast project directory.

// +kubebuilder:validation:XValidation:rule="[has(self.git), has(self.init), has(self.packaged)].exists_one(c, c)",message="One selection required between init, git, or packaged."

type FeastProjectDir struct {

Git *GitCloneOptions `json:"git,omitempty"`

Init *FeastInitOptions `json:"init,omitempty"`

Packaged *FeastPackagedOptions `json:"packaged,omitempty"`

}

// FeastPackagedOptions describes a feature repository packaged in a feature server image.

// +kubebuilder:validation:XValidation:rule="self.featureRepoPath.startsWith('/') && self.featureRepoPath != '/' && !self.featureRepoPath.contains('//') && !self.featureRepoPath.endsWith('/') && !self.featureRepoPath.contains('/./') && !self.featureRepoPath.endsWith('/.') && !self.featureRepoPath.contains('/../') && !self.featureRepoPath.endsWith('/..')",message="FeatureRepoPath must be a canonical absolute, non-root path without dot segments or repeated separators."

type FeastPackagedOptions struct {

// Image containing the packaged feature repository. When set, this image is used by the

// repository initialization and feast apply containers and as the default service image.

// When omitted, the operator's configured feature server image is used.

Image string `json:"image,omitempty"`

// FeatureRepoPath is the canonical absolute path to the feature repository in the image.

FeatureRepoPath string `json:"featureRepoPath"`

}

// GitCloneOptions describes how a clone should be performed.

// +kubebuilder:validation:XValidation:rule="has(self.featureRepoPath) ? !self.featureRepoPath.startsWith('/') : true",message="RepoPath must be a file name only, with no slashes."

type GitCloneOptions struct {

// The repository URL to clone from.

URL string `json:"url"`

// Reference to a branch / tag / commit

Ref string `json:"ref,omitempty"`

// Configs passed to git via `-c`

// e.g. http.sslVerify: 'false'

// OR 'url."https://api:\${TOKEN}@github.com/".insteadOf': 'https://github.com/'

Configs map[string]string `json:"configs,omitempty"`

// FeatureRepoPath is the relative path to the feature repo subdirectory. Default is 'feature_repo'.

FeatureRepoPath string `json:"featureRepoPath,omitempty"`

Env *[]corev1.EnvVar `json:"env,omitempty"`

EnvFrom *[]corev1.EnvFromSource `json:"envFrom,omitempty"`

}

// FeastInitOptions defines how to run a `feast init`.

type FeastInitOptions struct {

Minimal bool `json:"minimal,omitempty"`

// Template for the created project

// +kubebuilder:validation:Enum=local;gcp;aws;snowflake;spark;postgres;hbase;cassandra;hazelcast;couchbase;clickhouse;milvus;ray;ray_rag;pytorch_nlp

Template string `json:"template,omitempty"`

}

// FeastCronJob defines a CronJob to execute against a Feature Store deployment.

type FeastCronJob struct {

// Annotations to be added to the CronJob metadata.

Annotations map[string]string `json:"annotations,omitempty"`

// Specification of the desired behavior of a job.

JobSpec *JobSpec `json:"jobSpec,omitempty"`

ContainerConfigs *CronJobContainerConfigs `json:"containerConfigs,omitempty"`

// The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.

Schedule string `json:"schedule,omitempty"`

// The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones.

// If not specified, this will default to the time zone of the kube-controller-manager process.

// The set of valid time zone names and the time zone offset is loaded from the system-wide time zone

// database by the API server during CronJob validation and the controller manager during execution.

// If no system-wide time zone database can be found a bundled version of the database is used instead.

// If the time zone name becomes invalid during the lifetime of a CronJob or due to a change in host

// configuration, the controller will stop creating new new Jobs and will create a system event with the

// reason UnknownTimeZone.

// More information can be found in https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones

TimeZone *string `json:"timeZone,omitempty"`

// Optional deadline in seconds for starting the job if it misses scheduled

// time for any reason. Missed jobs executions will be counted as failed ones.

StartingDeadlineSeconds *int64 `json:"startingDeadlineSeconds,omitempty"`

// Specifies how to treat concurrent executions of a Job.

// Valid values are:

//

// - "Allow" (default): allows CronJobs to run concurrently;

// - "Forbid": forbids concurrent runs, skipping next run if previous run hasn't finished yet;

// - "Replace": cancels currently running job and replaces it with a new one

ConcurrencyPolicy batchv1.ConcurrencyPolicy `json:"concurrencyPolicy,omitempty"`

// This flag tells the controller to suspend subsequent executions, it does

// not apply to already started executions.

Suspend *bool `json:"suspend,omitempty"`

// The number of successful finished jobs to retain. Value must be non-negative integer.

SuccessfulJobsHistoryLimit *int32 `json:"successfulJobsHistoryLimit,omitempty"`

// The number of failed finished jobs to retain. Value must be non-negative integer.

FailedJobsHistoryLimit *int32 `json:"failedJobsHistoryLimit,omitempty"`

}

// BatchEngineConfig defines the batch compute engine configuration.

type BatchEngineConfig struct {

// Reference to a ConfigMap containing the batch engine configuration.

// The ConfigMap should contain YAML-formatted config with 'type' and engine-specific fields.

ConfigMapRef *corev1.LocalObjectReference `json:"configMapRef,omitempty"`

// Key name in the ConfigMap. Defaults to "config" if not specified.

ConfigMapKey string `json:"configMapKey,omitempty"`

}

// DataQualityMonitoringConfig defines the Data Quality Monitoring configuration.

type DataQualityMonitoringConfig struct {

// AutoBaseline controls whether baseline distribution is computed automatically on feast apply. Defaults to true.

// +kubebuilder:default=true

AutoBaseline *bool `json:"autoBaseline,omitempty"`

}

// JobSpec describes how the job execution will look like.

type JobSpec struct {

// PodTemplateAnnotations are annotations to be applied to the CronJob's PodTemplate

// metadata. This is separate from the CronJob-level annotations and must be

// set explicitly by users if they want annotations on the PodTemplate.

PodTemplateAnnotations map[string]string `json:"podTemplateAnnotations,omitempty"`

// Specifies the maximum desired number of pods the job should

// run at any given time. The actual number of pods running in steady state will

// be less than this number when ((.spec.completions - .status.successful) < .spec.parallelism),

// i.e. when the work left to do is less than max parallelism.

// More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/

Parallelism *int32 `json:"parallelism,omitempty"`

// Specifies the desired number of successfully finished pods the

// job should be run with. Setting to null means that the success of any

// pod signals the success of all pods, and allows parallelism to have any positive

// value. Setting to 1 means that parallelism is limited to 1 and the success of that

// pod signals the success of the job.

// More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/

Completions *int32 `json:"completions,omitempty"`

// Specifies the duration in seconds relative to the startTime that the job

// may be continuously active before the system tries to terminate it; value

// must be positive integer. If a Job is suspended (at creation or through an

// update), this timer will effectively be stopped and reset when the Job is

// resumed again.

ActiveDeadlineSeconds *int64 `json:"activeDeadlineSeconds,omitempty"`

// Specifies the policy of handling failed pods. In particular, it allows to

// specify the set of actions and conditions which need to be

// satisfied to take the associated action.

// If empty, the default behaviour applies - the counter of failed pods,

// represented by the jobs's .status.failed field, is incremented and it is

// checked against the backoffLimit. This field cannot be used in combination

// with restartPolicy=OnFailure.

//

// This field is beta-level. It can be used when the `JobPodFailurePolicy`

// feature gate is enabled (enabled by default).

PodFailurePolicy *batchv1.PodFailurePolicy `json:"podFailurePolicy,omitempty"`

// Specifies the number of retries before marking this job failed.

BackoffLimit *int32 `json:"backoffLimit,omitempty"`

// Specifies the limit for the number of retries within an

// index before marking this index as failed. When enabled the number of

// failures per index is kept in the pod's

// batch.kubernetes.io/job-index-failure-count annotation. It can only

// be set when Job's completionMode=Indexed, and the Pod's restart

// policy is Never. The field is immutable.

// This field is beta-level. It can be used when the `JobBackoffLimitPerIndex`

// feature gate is enabled (enabled by default).

BackoffLimitPerIndex *int32 `json:"backoffLimitPerIndex,omitempty"`

// Specifies the maximal number of failed indexes before marking the Job as

// failed, when backoffLimitPerIndex is set. Once the number of failed

// indexes exceeds this number the entire Job is marked as Failed and its

// execution is terminated. When left as null the job continues execution of

// all of its indexes and is marked with the `Complete` Job condition.

// It can only be specified when backoffLimitPerIndex is set.

// It can be null or up to completions. It is required and must be

// less than or equal to 10^4 when is completions greater than 10^5.

// This field is beta-level. It can be used when the `JobBackoffLimitPerIndex`

// feature gate is enabled (enabled by default).

MaxFailedIndexes *int32 `json:"maxFailedIndexes,omitempty"`

// ttlSecondsAfterFinished limits the lifetime of a Job that has finished

// execution (either Complete or Failed). If this field is set,

// ttlSecondsAfterFinished after the Job finishes, it is eligible to be

// automatically deleted. When the Job is being deleted, its lifecycle

// guarantees (e.g. finalizers) will be honored. If this field is unset,

// the Job won't be automatically deleted. If this field is set to zero,

// the Job becomes eligible to be deleted immediately after it finishes.

TTLSecondsAfterFinished *int32 `json:"ttlSecondsAfterFinished,omitempty"`

// completionMode specifies how Pod completions are tracked. It can be

// `NonIndexed` (default) or `Indexed`.

//

// `NonIndexed` means that the Job is considered complete when there have

// been .spec.completions successfully completed Pods. Each Pod completion is

// homologous to each other.

//

// `Indexed` means that the Pods of a

// Job get an associated completion index from 0 to (.spec.completions - 1),

// available in the annotation batch.kubernetes.io/job-completion-index.

// The Job is considered complete when there is one successfully completed Pod

// for each index.

// When value is `Indexed`, .spec.completions must be specified and

// `.spec.parallelism` must be less than or equal to 10^5.

// In addition, The Pod name takes the form

// `$(job-name)-$(index)-$(random-string)`,

// the Pod hostname takes the form `$(job-name)-$(index)`.

//

// More completion modes can be added in the future.

// If the Job controller observes a mode that it doesn't recognize, which

// is possible during upgrades due to version skew, the controller

// skips updates for the Job.

CompletionMode *batchv1.CompletionMode `json:"completionMode,omitempty"`

// suspend specifies whether the Job controller should create Pods or not. If

// a Job is created with suspend set to true, no Pods are created by the Job

// controller. If a Job is suspended after creation (i.e. the flag goes from

// false to true), the Job controller will delete all active Pods associated

// with this Job. Users must design their workload to gracefully handle this.

// Suspending a Job will reset the StartTime field of the Job, effectively

// resetting the ActiveDeadlineSeconds timer too.

//

Suspend *bool `json:"suspend,omitempty"`

// podReplacementPolicy specifies when to create replacement Pods.

// Possible values are:

// - TerminatingOrFailed means that we recreate pods

// when they are terminating (has a metadata.deletionTimestamp) or failed.

// - Failed means to wait until a previously created Pod is fully terminated (has phase

// Failed or Succeeded) before creating a replacement Pod.

//

// When using podFailurePolicy, Failed is the the only allowed value.

// TerminatingOrFailed and Failed are allowed values when podFailurePolicy is not in use.

// This is an beta field. To use this, enable the JobPodReplacementPolicy feature toggle.

// This is on by default.

PodReplacementPolicy *batchv1.PodReplacementPolicy `json:"podReplacementPolicy,omitempty"`

}

// FeatureStoreServices defines the desired feast services. An ephemeral onlineStore feature server is deployed by default.

// +kubebuilder:validation:XValidation:rule="!has(self.mcpServer) || !has(self.onlineStore) || !has(self.onlineStore.disabled) || !self.onlineStore.disabled || (has(self.registry) && has(self.registry.local) && has(self.registry.local.server) && has(self.registry.local.server.restAPI) && self.registry.local.server.restAPI == true)",message="mcpServer requires at least one upstream: either onlineStore must not be disabled, or registry must have restAPI enabled."

type FeatureStoreServices struct {

OfflineStore *OfflineStore `json:"offlineStore,omitempty"`

OnlineStore *OnlineStore `json:"onlineStore,omitempty"`

Registry *Registry `json:"registry,omitempty"`

// Creates a UI server container

UI *ServerConfigs `json:"ui,omitempty"`

// McpServer deploys a standalone Feast MCP (Model Context Protocol) server container (`feast mcp`). It is separate from the embedded MCP of services.onlineStore.serving.mcp and services.registry.local.server.mcp.

// +optional

McpServer *McpServerConfig `json:"mcpServer,omitempty"`

DeploymentStrategy *appsv1.DeploymentStrategy `json:"deploymentStrategy,omitempty"`

SecurityContext *corev1.PodSecurityContext `json:"securityContext,omitempty"`

// PodAnnotations are annotations to be applied to the Deployment's PodTemplate metadata.

// This enables annotation-driven integrations like OpenTelemetry auto-instrumentation,

// Istio sidecar injection, Vault agent injection, etc.

// +optional

PodAnnotations map[string]string `json:"podAnnotations,omitempty"`

// Disable the 'feast repo initialization' initContainer

DisableInitContainers bool `json:"disableInitContainers,omitempty"`

// InitImage overrides the image for init containers (feast-init, feast-apply).

// Resolution order: InitImage → FeastProjectDir.Packaged.Image → RELATED_IMAGE_FEATURE_SERVER → DefaultImage.

// +optional

InitImage *string `json:"initImage,omitempty"`

// Runs feast apply on pod start to populate the registry. Defaults to true. Ignored when DisableInitContainers is true.

RunFeastApplyOnInit *bool `json:"runFeastApplyOnInit,omitempty"`

// Volumes specifies the volumes to mount in the FeatureStore deployment. A corresponding `VolumeMount` should be added to whichever feast service(s) require access to said volume(s).

Volumes []corev1.Volume `json:"volumes,omitempty"`

// Scaling configures horizontal scaling for the FeatureStore deployment (e.g. HPA autoscaling).

// For static replicas, use spec.replicas instead.

Scaling *ScalingConfig `json:"scaling,omitempty"`

// PodDisruptionBudgets configures a PodDisruptionBudget for the FeatureStore deployment.

// Only created when scaling is enabled (replicas > 1 or autoscaling).

// +optional

PodDisruptionBudgets *PDBConfig `json:"podDisruptionBudgets,omitempty"`

// TopologySpreadConstraints defines how pods are spread across topology domains.

// When scaling is enabled and this is not set, the operator auto-injects a soft

// zone-spread constraint (whenUnsatisfiable: ScheduleAnyway).

// Set to an empty array to disable auto-injection.

// +optional

TopologySpreadConstraints []corev1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`

// Affinity defines the pod scheduling constraints for the FeatureStore deployment.

// When scaling is enabled and this is not set, the operator auto-injects a soft

// pod anti-affinity rule to prefer spreading pods across nodes.

// +optional

Affinity *corev1.Affinity `json:"affinity,omitempty"`

// Tolerations are applied to the FeatureStore deployment pods, allowing them to

// be scheduled onto nodes with matching taints.

// +optional

Tolerations []corev1.Toleration `json:"tolerations,omitempty"`

// NodeSelector is a selector which must be true for the FeatureStore deployment

// pods to fit on a node. This selector must match a node's labels for the pod to

// be scheduled on that node.

// +optional

NodeSelector map[string]string `json:"nodeSelector,omitempty"`

// ResourceClaims defines which ResourceClaims must be allocated

// and reserved before the Pod is allowed to start. The resources

// will be made available to those containers which consume them

// by name.

//

// +patchMergeKey=name

// +patchStrategy=merge,retainKeys

// +listType=map

// +listMapKey=name

// +optional

ResourceClaims []corev1.PodResourceClaim `json:"resourceClaims,omitempty" patchStrategy:"merge,retainKeys" patchMergeKey:"name"`

}

// ScalingConfig configures horizontal scaling for the FeatureStore deployment.

type ScalingConfig struct {

// Autoscaling configures a HorizontalPodAutoscaler for the FeatureStore deployment.

// Mutually exclusive with spec.replicas.

// +optional

Autoscaling *AutoscalingConfig `json:"autoscaling,omitempty"`

}

// AutoscalingConfig defines HPA settings for the FeatureStore deployment.

type AutoscalingConfig struct {

// MinReplicas is the lower limit for the number of replicas. Defaults to 1.

// +kubebuilder:validation:Minimum=1

// +optional

MinReplicas *int32 `json:"minReplicas,omitempty"`

// MaxReplicas is the upper limit for the number of replicas. Required.

// +kubebuilder:validation:Minimum=1

MaxReplicas int32 `json:"maxReplicas"`

// Metrics contains the specifications for which to use to calculate the desired replica count.

// If not set, defaults to 80% CPU utilization.

// +optional

Metrics []autoscalingv2.MetricSpec `json:"metrics,omitempty"`

// Behavior configures the scaling behavior of the target.

// +optional

Behavior *autoscalingv2.HorizontalPodAutoscalerBehavior `json:"behavior,omitempty"`

}

// PDBConfig configures a PodDisruptionBudget for the FeatureStore deployment.

// Exactly one of minAvailable or maxUnavailable must be set.

// +kubebuilder:validation:XValidation:rule="[has(self.minAvailable), has(self.maxUnavailable)].exists_one(c, c)",message="Exactly one of minAvailable or maxUnavailable must be set."

type PDBConfig struct {

// MinAvailable specifies the minimum number/percentage of pods that must remain available.

// Mutually exclusive with maxUnavailable.

// +optional

MinAvailable *intstr.IntOrString `json:"minAvailable,omitempty"`

// MaxUnavailable specifies the maximum number/percentage of pods that can be unavailable.

// Mutually exclusive with minAvailable.

// +optional

MaxUnavailable *intstr.IntOrString `json:"maxUnavailable,omitempty"`

}

// OfflineStore configures the offline store service

type OfflineStore struct {

// Creates a remote offline server container

Server *ServerConfigs `json:"server,omitempty"`

Persistence *OfflineStorePersistence `json:"persistence,omitempty"`

}

// OfflineStorePersistence configures the persistence settings for the offline store service

// +kubebuilder:validation:XValidation:rule="[has(self.file), has(self.store)].exists_one(c, c)",message="One selection required between file or store."

type OfflineStorePersistence struct {

FilePersistence *OfflineStoreFilePersistence `json:"file,omitempty"`

DBPersistence *OfflineStoreDBStorePersistence `json:"store,omitempty"`

}

// OfflineStoreFilePersistence configures the file-based persistence for the offline store service

type OfflineStoreFilePersistence struct {

// +kubebuilder:validation:Enum=file;dask;duckdb

Type string `json:"type,omitempty"`

PvcConfig *PvcConfig `json:"pvc,omitempty"`

}

var ValidOfflineStoreFilePersistenceTypes = []string{

"dask",

"duckdb",

"file",

}

// OfflineStoreDBStorePersistence configures the DB store persistence for the offline store service

type OfflineStoreDBStorePersistence struct {

// Type of the persistence type you want to use.

// +kubebuilder:validation:Enum=snowflake.offline;bigquery;redshift;spark;postgres;trino;athena;mssql;couchbase.offline;clickhouse;ray;oracle;hybrid;chronon

Type string `json:"type"`

// Data store parameters should be placed as-is from the "feature_store.yaml" under the secret key. "registry_type" & "type" fields should be removed.

SecretRef corev1.LocalObjectReference `json:"secretRef"`

// By default, the selected store "type" is used as the SecretKeyName

SecretKeyName string `json:"secretKeyName,omitempty"`

}

var ValidOfflineStoreDBStorePersistenceTypes = []string{

"snowflake.offline",

"bigquery",

"redshift",

"spark",

"postgres",

"trino",

"athena",

"mssql",

"couchbase.offline",

"clickhouse",

"ray",

"oracle",

"hybrid",

"chronon",

}

// OnlineStore configures the online store service

type OnlineStore struct {

// Creates a feature server container

Server *ServerConfigs `json:"server,omitempty"`

Persistence *OnlineStorePersistence `json:"persistence,omitempty"`

// Serving configures the Feast feature_server section written into feature_store.yaml for the online serve pod.

// Controls metrics granularity, offline push batching, and MCP.

// +optional

Serving *ServingConfig `json:"serving,omitempty"`

// Disabled skips deploying the online store service entirely, including its

// serving pod and persistence. Omitting the online store block, or setting

// this to false, deploys the online store with defaults as before.

// +optional

Disabled bool `json:"disabled,omitempty"`

}

// ServingConfig configures the feature_server section of the generated feature_store.yaml.

// When Mcp is set, the feature server type is switched to "mcp"; otherwise "local" is used.

type ServingConfig struct {

// Metrics configures per-category Prometheus metrics for the feature server.

// Coexists with the server.metrics bool flag — both can be set simultaneously.

// +optional

Metrics *ServingMetricsConfig `json:"metrics,omitempty"`

// OfflinePushBatching batches writes to the offline store via the /push endpoint.

// +optional

OfflinePushBatching *OfflinePushBatchingConfig `json:"offlinePushBatching,omitempty"`

// Mcp enables MCP (Model Context Protocol) server support. When set, feature server type is "mcp".

// +optional

Mcp *McpConfig `json:"mcp,omitempty"`

}

// ServingMetricsConfig controls per-category Prometheus metrics for the feature server.

// Setting Enabled to true activates the metrics HTTP server on port 8000.

// All metric categories default to true when enabled; use Categories to selectively disable them.

type ServingMetricsConfig struct {

// Enable the Prometheus metrics endpoint on port 8000.

Enabled bool `json:"enabled"`

// Categories selectively enables or disables individual Feast metric categories.

// Keys are Feast MetricsConfig field names (e.g. "resource", "request",

// "online_features", "push", "materialization", "freshness"). Omitted keys

// default to true when metrics is enabled.

// +optional

Categories map[string]bool `json:"categories,omitempty"`

}

// OfflinePushBatchingConfig controls batching of writes to the offline store via the /push endpoint.

// Recommended for high-throughput push workloads (streaming pipelines, IoT) to prevent OOM.

type OfflinePushBatchingConfig struct {

// Enable offline push batching.

Enabled bool `json:"enabled"`

// Maximum number of rows per offline write batch.

// +kubebuilder:validation:Minimum=1

// +optional

BatchSize *int32 `json:"batchSize,omitempty"`

// Seconds between batch flushes to the offline store.

// +kubebuilder:validation:Minimum=1

// +optional

BatchIntervalSeconds *int32 `json:"batchIntervalSeconds,omitempty"`

}

// McpConfig enables MCP (Model Context Protocol) server support in the feature server.

// When this field is set on ServingConfig, the feature server type is switched to "mcp".

type McpConfig struct {

// Enable the MCP server.

Enabled bool `json:"enabled"`

// MCP server name for identification. Defaults to "feast-mcp-server".

// +optional

ServerName *string `json:"serverName,omitempty"`

// MCP server version string. Defaults to "1.0.0".

// +optional

ServerVersion *string `json:"serverVersion,omitempty"`

// MCP transport protocol.

// +kubebuilder:validation:Enum=sse;http

// +optional

Transport *string `json:"transport,omitempty"`

}

// McpServerConfig configures a standalone Feast MCP server container (the `feast mcp` command).

// The server proxies to the online feature server and/or REST registry server over HTTP. Its

// transport, upstream URLs, authentication and observability are read from a feast_mcp.yaml

// config file supplied via a ConfigMap. The operator owns the container's bind host and port

// (used for the generated Service). The container image defaults to the shared feature-server

// image (which already includes `feast mcp` via the `minimal` extra).

//

// NOTE: the following embedded ServerConfigs fields are ignored for mcpServer:

// `tls` (operator-managed TLS is not supported yet), `metrics`, and `workerConfigs`.

// To run multiple gunicorn workers, set `server.workers` in the feast_mcp.yaml ConfigMap.

type McpServerConfig struct {

ServerConfigs `json:",inline"`

// Config references a ConfigMap holding the feast_mcp.yaml file passed to `feast mcp --config`. Its transport must be http, streamable-http or sse, because the stdio default cannot serve the Service. If omitted, the operator passes `--transport http` unless FEAST_MCP_TRANSPORT is set in env.

// +optional

Config *McpServerConfigSource `json:"config,omitempty"`

}

// McpServerConfigSource references a ConfigMap key holding the feast_mcp.yaml content.

// +kubebuilder:validation:XValidation:rule="has(self.configMapRef.name) && size(self.configMapRef.name) > 0",message="configMapRef.name is required"

type McpServerConfigSource struct {

// ConfigMapRef is a reference to a ConfigMap in the same namespace containing the MCP config.

ConfigMapRef corev1.LocalObjectReference `json:"configMapRef"`

// ConfigMapKey is the key in the ConfigMap holding the feast_mcp.yaml content.

// +kubebuilder:default="feast_mcp.yaml"

// +optional

ConfigMapKey string `json:"configMapKey,omitempty"`

}

// OnlineStorePersistence configures the persistence settings for the online store service

// +kubebuilder:validation:XValidation:rule="[has(self.file), has(self.store)].exists_one(c, c)",message="One selection required between file or store."

type OnlineStorePersistence struct {

FilePersistence *OnlineStoreFilePersistence `json:"file,omitempty"`

DBPersistence *OnlineStoreDBStorePersistence `json:"store,omitempty"`

}

// OnlineStoreFilePersistence configures the file-based persistence for the online store service

// +kubebuilder:validation:XValidation:rule="(!has(self.pvc) && has(self.path)) ? self.path.startsWith('/') : true",message="Ephemeral stores must have absolute paths."

// +kubebuilder:validation:XValidation:rule="(has(self.pvc) && has(self.path)) ? !self.path.startsWith('/') : true",message="PVC path must be a file name only, with no slashes."

// +kubebuilder:validation:XValidation:rule="has(self.path) ? !(self.path.startsWith('s3://') || self.path.startsWith('gs://')) : true",message="Online store does not support S3 or GS buckets."

type OnlineStoreFilePersistence struct {

Path string `json:"path,omitempty"`

PvcConfig *PvcConfig `json:"pvc,omitempty"`

}

// OnlineStoreDBStorePersistence configures the DB store persistence for the online store service

type OnlineStoreDBStorePersistence struct {

// Type of the persistence type you want to use.

// +kubebuilder:validation:Enum=snowflake.online;redis;datastore;dynamodb;bigtable;postgres;cassandra;mysql;hazelcast;singlestore;hbase;elasticsearch;qdrant;couchbase.online;milvus;hybrid;mongodb;aerospike;scylladb;chronon;pinecone

Type string `json:"type"`

// Data store parameters should be placed as-is from the "feature_store.yaml" under the secret key. "registry_type" & "type" fields should be removed.

SecretRef corev1.LocalObjectReference `json:"secretRef"`

// By default, the selected store "type" is used as the SecretKeyName

SecretKeyName string `json:"secretKeyName,omitempty"`

}

var ValidOnlineStoreDBStorePersistenceTypes = []string{

"snowflake.online",

"redis",

"datastore",

"dynamodb",

"bigtable",

"postgres",

"cassandra",

"mysql",

"hazelcast",

"singlestore",

"hbase",

"elasticsearch",

"qdrant",

"couchbase.online",

"milvus",

"hybrid",

"mongodb",

"aerospike",

"scylladb",

"chronon",

"pinecone",

}

// LocalRegistryConfig configures the registry service

type LocalRegistryConfig struct {

// Creates a registry server container

Server *RegistryServerConfigs `json:"server,omitempty"`

Persistence *RegistryPersistence `json:"persistence,omitempty"`

}

// RegistryPersistence configures the persistence settings for the registry service

// +kubebuilder:validation:XValidation:rule="[has(self.file), has(self.store)].exists_one(c, c)",message="One selection required between file or store."

type RegistryPersistence struct {

FilePersistence *RegistryFilePersistence `json:"file,omitempty"`

DBPersistence *RegistryDBStorePersistence `json:"store,omitempty"`

}

// RegistryFilePersistence configures the file-based persistence for the registry service

// +kubebuilder:validation:XValidation:rule="(!has(self.pvc) && has(self.path)) ? (self.path.startsWith('/') || self.path.startsWith('s3://') || self.path.startsWith('gs://')) : true",message="Registry files must use absolute paths or be S3 ('s3://') or GS ('gs://') object store URIs."

// +kubebuilder:validation:XValidation:rule="(has(self.pvc) && has(self.path)) ? !self.path.startsWith('/') : true",message="PVC path must be a file name only, with no slashes."

// +kubebuilder:validation:XValidation:rule="(has(self.pvc) && has(self.path)) ? !(self.path.startsWith('s3://') || self.path.startsWith('gs://')) : true",message="PVC persistence does not support S3 or GS object store URIs."

// +kubebuilder:validation:XValidation:rule="(has(self.s3_additional_kwargs) && has(self.path)) ? self.path.startsWith('s3://') : true",message="Additional S3 settings are available only for S3 object store URIs."

type RegistryFilePersistence struct {

Path string `json:"path,omitempty"`

PvcConfig *PvcConfig `json:"pvc,omitempty"`

S3AdditionalKwargs *map[string]string `json:"s3_additional_kwargs,omitempty"`

// CacheTTLSeconds defines the TTL (in seconds) for the registry cache.

// +kubebuilder:validation:Minimum=0

// +optional

CacheTTLSeconds *int32 `json:"cache_ttl_seconds,omitempty"`

// CacheMode defines the registry cache update strategy.

// Allowed values are "sync" and "thread".

// +kubebuilder:validation:Enum=none;sync;thread

// +optional

CacheMode *string `json:"cache_mode,omitempty"`

}

// RegistryDBStorePersistence configures the DB store persistence for the registry service

type RegistryDBStorePersistence struct {

// Type of the persistence type you want to use.

// +kubebuilder:validation:Enum=sql;snowflake.registry

Type string `json:"type"`

// Data store parameters should be placed as-is from the "feature_store.yaml" under the secret key. "registry_type" & "type" fields should be removed.

SecretRef corev1.LocalObjectReference `json:"secretRef"`

// By default, the selected store "type" is used as the SecretKeyName

SecretKeyName string `json:"secretKeyName,omitempty"`

}

var ValidRegistryDBStorePersistenceTypes = []string{

"sql",

"snowflake.registry",

}

// PvcConfig defines the settings for a persistent file store based on PVCs.

// We can refer to an existing PVC using the `Ref` field, or create a new one using the `Create` field.

// +kubebuilder:validation:XValidation:rule="[has(self.ref), has(self.create)].exists_one(c, c)",message="One selection is required between ref and create."

// +kubebuilder:validation:XValidation:rule="self.mountPath.matches('^/[^:]*$')",message="Mount path must start with '/' and must not contain ':'"

type PvcConfig struct {

// Reference to an existing field

Ref *corev1.LocalObjectReference `json:"ref,omitempty"`

// Settings for creating a new PVC

Create *PvcCreate `json:"create,omitempty"`

// MountPath within the container at which the volume should be mounted.

// Must start by "/" and cannot contain ':'.

MountPath string `json:"mountPath"`

}

// PvcCreate defines the immutable settings to create a new PVC mounted at the given path.

// The PVC name is the same as the associated deployment & feast service name.

// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="PvcCreate is immutable"

type PvcCreate struct {

// AccessModes k8s persistent volume access modes. Defaults to ["ReadWriteOnce"].

AccessModes []corev1.PersistentVolumeAccessMode `json:"accessModes,omitempty"`

// StorageClassName is the name of an existing StorageClass to which this persistent volume belongs. Empty value

// means that this volume does not belong to any StorageClass and the cluster default will be used.

StorageClassName *string `json:"storageClassName,omitempty"`

// Resources describes the storage resource requirements for a volume.

// Default requested storage size depends on the associated service:

// - 10Gi for offline store

// - 5Gi for online store

// - 5Gi for registry

Resources corev1.VolumeResourceRequirements `json:"resources,omitempty"`

}

// Registry configures the registry service. One selection is required. Local is the default setting.

// +kubebuilder:validation:XValidation:rule="[has(self.local), has(self.remote)].exists_one(c, c)",message="One selection required."

type Registry struct {

Local *LocalRegistryConfig `json:"local,omitempty"`

Remote *RemoteRegistryConfig `json:"remote,omitempty"`

}

// RemoteRegistryConfig points to a remote feast registry server. When set, the operator will not deploy a registry for this FeatureStore CR.

// Instead, this FeatureStore CR's online/offline services will use a remote registry. One selection is required.

// +kubebuilder:validation:XValidation:rule="[has(self.hostname), has(self.feastRef)].exists_one(c, c)",message="One selection required."

type RemoteRegistryConfig struct {

// Host address of the remote registry service - <domain>:<port>, e.g. `registry.<namespace>.svc.cluster.local:80`

Hostname *string `json:"hostname,omitempty"`

// Reference to an existing `FeatureStore` CR in the same k8s cluster.

FeastRef *FeatureStoreRef `json:"feastRef,omitempty"`

TLS *TlsRemoteRegistryConfigs `json:"tls,omitempty"`

}

// FeatureStoreRef defines which existing FeatureStore's registry should be used

type FeatureStoreRef struct {

// Name of the FeatureStore

Name string `json:"name"`

// Namespace of the FeatureStore

Namespace string `json:"namespace,omitempty"`

}

// ServerConfigs creates a server for the feast service, with specified container configurations.

type ServerConfigs struct {

ContainerConfigs `json:",inline"`

TLS *TlsConfigs `json:"tls,omitempty"`

// LogLevel sets the logging level for the server

// Allowed values: "debug", "info", "warning", "error", "critical".

// +kubebuilder:validation:Enum=debug;info;warning;error;critical

LogLevel *string `json:"logLevel,omitempty"`

// Metrics exposes Prometheus-compatible metrics for the Feast server when enabled.

Metrics *bool `json:"metrics,omitempty"`

// DualStack binds the server to the IPv6 wildcard address instead of 0.0.0.0,

// which serves both IPv6 and IPv4 clients on Linux. Enable it on IPv6-only or dual-stack clusters.

// Unset or false binds 0.0.0.0 (IPv4 only) for every server that takes a host flag, including the registry's REST server.

// +optional

DualStack *bool `json:"dualStack,omitempty"`

// VolumeMounts defines the list of volumes that should be mounted into the feast container.

// This allows attaching persistent storage, config files, secrets, or other resources

// required by the Feast components. Ensure that each volume mount has a corresponding

// volume definition in the Volumes field.

VolumeMounts []corev1.VolumeMount `json:"volumeMounts,omitempty"`

// WorkerConfigs defines the worker configuration for the Feast server.

// These options are primarily used for production deployments to optimize performance.

WorkerConfigs *WorkerConfigs `json:"workerConfigs,omitempty"`

}

// WorkerConfigs defines the worker configuration for Feast servers.

// These settings control gunicorn worker processes for production deployments.

type WorkerConfigs struct {

// Workers is the number of worker processes. Use -1 to auto-calculate based on CPU cores (2 * CPU + 1).

// Defaults to 1 if not specified.

// +kubebuilder:validation:Minimum=-1

// +optional

Workers *int32 `json:"workers,omitempty"`

// WorkerConnections is the maximum number of simultaneous clients per worker process.

// Defaults to 1000.

// +kubebuilder:validation:Minimum=1

// +optional

WorkerConnections *int32 `json:"workerConnections,omitempty"`

// MaxRequests is the maximum number of requests a worker will process before restarting.

// This helps prevent memory leaks. Defaults to 1000.

// +kubebuilder:validation:Minimum=0

// +optional

MaxRequests *int32 `json:"maxRequests,omitempty"`

// MaxRequestsJitter is the maximum jitter to add to max-requests to prevent

// thundering herd effect on worker restart. Defaults to 50.

// +kubebuilder:validation:Minimum=0

// +optional

MaxRequestsJitter *int32 `json:"maxRequestsJitter,omitempty"`

// KeepAliveTimeout is the timeout for keep-alive connections in seconds.

// Defaults to 30.

// +kubebuilder:validation:Minimum=1

// +optional

KeepAliveTimeout *int32 `json:"keepAliveTimeout,omitempty"`

// RegistryTTLSeconds is the number of seconds after which the registry is refreshed.

// Higher values reduce refresh overhead but increase staleness. Defaults to 60.

// +kubebuilder:validation:Minimum=0

// +optional

RegistryTTLSeconds *int32 `json:"registryTTLSeconds,omitempty"`

}

// RegistryServerConfigs creates a registry server for the feast service, with specified container configurations.

// +kubebuilder:validation:XValidation:rule="self.restAPI == true || self.grpc == true || !has(self.grpc)", message="At least one of restAPI or grpc must be true"

// +kubebuilder:validation:XValidation:rule="!has(self.mcp) || !self.mcp.enabled || (has(self.restAPI) && self.restAPI == true)", message="MCP requires restAPI to be true"

type RegistryServerConfigs struct {

ServerConfigs `json:",inline"`

// Enable REST API registry server.

RestAPI *bool `json:"restAPI,omitempty"`

// Enable gRPC registry server. Defaults to true if unset.

GRPC *bool `json:"grpc,omitempty"`